Tracker

Ransomware Tracker to distinguishes between the following threats:

Each entry in Ransomware Tracker is tagged to a threat and a malware. Currently, the following Ransomware families are tracked:

New submissions for Ransomware Tracker are warmly welcome. You can send new additions to rt-RintANel@abuse.ch (remove all letters in uppercase). Malware binaries that you suspect to be associated with a certain Ransomware family can be send to rt-malwSOareM@abuse.ch (remove all letters in uppercase) for analysis.

Search

You can search for a host or URL using the following search form:

Set a filter for the list below

Below is a list of Ransomware botnet C&C servers tracked by Ransomware Tracker. You have the possibility to filter the list below using certain pre-defined filters shown below.

General filters: Remove filter (Show all) | Online hosts
Filter by threat: Botnet C&Cs | Payment Sites | Distribution Sites
Filter by malware: TeslaCrypt | CryptoWall | TorrentLocker | PadCrypt | Locky | CTB-Locker | FAKBEN | PayCrypt | DMALocker | Cerber | Sage

Dateadded (UTC)ThreatMalwareHost (?Domain name or IP address used by the Ransomware. The leading dots (Red, Green, Grey) indicate whether the Host is active or not.

Red = Online
Green = Offline
Grey = Unknown
)
Domain Registrar (?In some cases Ransomware Tracker is not able to determine the sponsoring Registrar of a domain name. Thats either because the Registry does not reveal this information in the whois or because the Registry doesn't offer a whois service.)IP address (ASN, Country)
2016-09-15 09:52Distribution SiteLocky
knightsbridgeboutique.com
EVERYONES INTERNET, LTD. DBA SOF[...] (n/a)
2016-09-15 09:52Distribution SiteLocky
swapol.net
WILD WEST DOMAINS, LLC (n/a)
2016-09-15 09:52Distribution SiteLocky
tymelprof.ru
AGAVA-RU81.177.141.15 (- Russian Federation)
2016-09-15 09:51Distribution SiteLocky
akeseverin.com
REGISTER.IT SPA192.230.80.37 (- United States) +1 A record(s) 192.230.83.37 (AS19551, - United States)
2016-09-15 09:51Distribution SiteLocky
mikbaro.com
10DENCEHISPAHARD, S.L134.0.11.63 (- Spain)
2016-09-15 09:50Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:50Distribution SiteLocky
monsalwa.com
GODADDY.COM, LLC104.24.126.56 (- United States) +1 A record(s) 104.24.127.56 (AS13335, - United States)
2016-09-15 09:49Distribution SiteLocky
forex-trading.nl
Flexwebhosting BV46.17.2.169 (- Netherlands)
2016-09-15 09:48Distribution SiteLocky
fedoriv.net
ONLINENIC, INC.46.4.172.254 (- Germany)
2016-09-15 09:48Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:47Distribution SiteLocky
wyvesnarl.info
PakNIC (Private) Limited184.105.192.2 (- United States)
2016-09-15 09:46Distribution SiteLocky
beytascam.com
REGISTER.COM, INC.185.42.172.189 (- Turkey)
2016-09-15 09:46Distribution SiteLocky
esmahatun.com
NICS TELEKOMUNIKASYON TIC LTD. S[...]185.85.191.230 (- Turkey)
2016-09-15 09:45Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:45Distribution SiteLocky
bingolfm.com
IHS TELEKOM, INC.94.138.207.226 (- Turkey)
2016-09-15 09:44Distribution SiteLocky
normadnex.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-15 09:44Distribution SiteLocky
siamitcool.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]103.13.30.45 (- Thailand)
2016-09-15 09:43Distribution SiteLocky
nablussweet.com
GODADDY.COM, LLC69.164.214.65 (- United States)
2016-09-15 09:43Distribution SiteLocky
smokingbrushfineart.com
ENOM, INC.109.75.171.120 (- United Kingdom)
2016-09-15 09:42Distribution SiteLocky
gray-associates.co.uk
Fasthosts Internet Ltd195.8.197.130 (- United Kingdom)
2016-09-15 09:42Distribution SiteLocky
geototalgroup.com
TUCOWS DOMAINS INC.70.33.246.120 (- Canada)
2016-09-15 09:41Distribution SiteLocky
xn--o3cafudv5hceh20a.com
ONLINENIC, INC.210.1.60.27 (- Thailand)
2016-09-15 09:41Distribution SiteLocky
vernpucka.net
JSC REGISTRAR R01184.105.192.2 (- United States)
2016-09-15 09:11Payment SiteCerber
52uo5k3t73ypjije.fi50le.bid
Eranet International Limited (n/a)
2016-09-15 06:31Payment SiteCerber
unocl45trpuoefft.hvh2gb.bid
Eranet International Limited (n/a)
2016-09-15 04:42Payment SiteCerber
52uo5k3t73ypjije.catfills.mobi
PDR Ltd. d/b/a PublicDomainRegis[...] (n/a)
2016-09-15 01:23Payment SiteCerber
wjtqjleommc4z46i.4bb9vz.bid
Eranet International Limited (n/a)
2016-09-14 22:41Payment SiteCerber
52uo5k3t73ypjije.vmotsf.bid
Eranet International Limited (n/a)
2016-09-14 20:51Payment SiteCerber
52uo5k3t73ypjije.pr2zwz.bid
Eranet International Limited (n/a)
2016-09-14 20:12Distribution SiteLocky
pawlrubia.net
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:11Distribution SiteLocky
moismdheri.net
KEY-SYSTEMS GMBH (n/a)
2016-09-14 20:10Distribution SiteLocky
rokerlelia.net
KEY-SYSTEMS GMBH (n/a)
2016-09-14 20:09Distribution SiteLocky
pradran.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:09Distribution SiteLocky
amrastacy.com
WEB COMMERCE COMMUNICATIONS LIMI[...] (n/a)
2016-09-14 20:04Distribution SiteLocky
tearyrecce.com
KEY-SYSTEMS GMBH (n/a)
2016-09-14 18:44Payment SiteCerber
4kqd3hmqgptupi3p.scoreable.bid
Alpnames Limited (n/a)
2016-09-14 15:58Payment SiteCerber
4kqd3hmqgptupi3p.hotcopies.bid
Alpnames Limited (n/a)
2016-09-14 13:33Distribution SiteLocky
knife-gold.ru
REGRU-RU81.177.135.203 (- Russian Federation)
2016-09-14 13:32Distribution SiteLocky
jaysilverdp.com
MELBOURNE IT, LTD. D/B/A INTERNE[...]50.63.202.27 (- United States)
2016-09-14 13:32Distribution SiteLocky
thejollysanta.com
GODADDY.COM, LLC (n/a)
2016-09-14 13:32Distribution SiteLocky
forumcidadao.com.br
(n/a)
2016-09-14 13:31Distribution SiteLocky
infotenerife.biz
DYNADOT LLC141.101.128.124 (- Slovakia)
2016-09-14 13:31Distribution SiteLocky
xaydungtruonghung.com
P.A. VIET NAM COMPANY LIMITED112.213.84.58 (- Vietnam)
2016-09-14 13:31Distribution SiteLocky
montazh5.ru
R01-RU89.111.177.204 (- Russian Federation)
2016-09-14 13:30Distribution SiteLocky
blackssabbath.ru
R01-RU46.36.222.231 (- Estonia)
2016-09-14 13:29Distribution SiteLocky
dusklounge.com
ENOM, INC.173.255.131.205 (- United States)
2016-09-14 13:29Distribution SiteLocky
baanpalad.com
ONLINENIC, INC.103.7.56.217 (- Thailand)
2016-09-14 13:27Distribution SiteLocky
limret.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]52.192.173.220 (- Japan)
2016-09-14 13:27Distribution SiteLocky
xn--odka862xw00d.com
GMO INTERNET, INC. DBA ONAMAE.CO[...]114.160.88.110 (- Japan)
2016-09-14 13:26Distribution SiteLocky
kientrucvui.com
ONLINENIC, INC.210.245.94.129 (- Vietnam)
2016-09-14 13:25Distribution SiteLocky
sushi16.ru
REGRU-RU92.53.96.22 (- Russian Federation)
2016-09-14 13:23Distribution SiteLocky
cabincrewdiaries.com
1&1 INTERNET SE204.93.163.59 (- United States)
2016-09-14 13:23Distribution SiteLocky
yourmdb.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]209.99.40.223 (- United States)
2016-09-14 13:23Distribution SiteLocky
inventtheworld.com
GODADDY.COM, LLC41.193.54.15 (- South Africa)
2016-09-14 13:21Distribution SiteLocky
fleurdelysbridal.co.uk
123-Reg Limited t/a 123-reg109.74.205.195 (- United Kingdom)
2016-09-14 13:21Distribution SiteLocky
natural-anxiety-remedies.com
1&1 INTERNET SE174.127.104.112 (- United States)
2016-09-14 13:21Distribution SiteLocky
shawnbrothers.com
GODADDY.COM, LLC174.127.105.141 (- United States)
2016-09-14 13:20Distribution SiteLocky
deligoods.com
HOSTING CONCEPTS B.V. D/B/A OPEN[...]185.14.58.52 (- Spain)
2016-09-14 11:50Distribution SiteLocky
janie-royce.com
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-09-14 11:50Distribution SiteLocky
nas.com.eg
104.31.14.184 (- United States) +1 A record(s) 104.31.15.184 (AS13335, - United States)
2016-09-14 11:50Distribution SiteLocky
dropsheep.com
TUCOWS DOMAINS INC.88.198.138.107 (- Germany)
2016-09-14 11:49Distribution SiteLocky
bostonbruinsfan.net
FASTDOMAIN, INC.74.220.199.8 (- United States)
2016-09-14 11:49Distribution SiteLocky
cramjuice.com
GODADDY.COM, LLC204.11.56.48 (- Virgin Islands)
2016-09-14 11:49Distribution SiteLocky
infosors.com
ENOM, INC.50.31.162.18 (- United States)
2016-09-14 11:49Distribution SiteLocky
agetsoft.com
DOTNAME KOREA CORP (n/a)
2016-09-14 11:48Distribution SiteLocky
old-sinks.com
GODADDY.COM, LLC107.180.51.27 (- United States)
2016-09-14 11:48Distribution SiteLocky
kafemar.com
FBS INC.31.210.74.154 (- Turkey)
2016-09-14 11:48Distribution SiteLocky
rentmanager.ph
45.79.222.138 (- United States)
2016-09-14 11:48Distribution SiteLocky
thermalthermostat.com
GODADDY.COM, LLC23.229.183.136 (- United States)
2016-09-14 11:47Distribution SiteLocky
mediainnovationtech.com
GODADDY.COM, LLC115.124.104.13 (- India)
2016-09-14 11:47Distribution SiteLocky
vinaxanh.com
ONLINENIC, INC.112.213.94.125 (- Vietnam)
2016-09-14 11:46Distribution SiteLocky
asunaz.com
NAMESILO, LLC69.4.86.172 (- United States)
2016-09-14 11:45Distribution SiteLocky
allchannel.net
GODADDY.COM, LLC (n/a)
2016-09-14 11:44Distribution SiteLocky
cic-integration.com
ENOM, INC.202.67.9.246 (- Indonesia)
2016-09-14 11:44Distribution SiteLocky
amicentng.com
ACTIVE REGISTRAR, INC.143.95.236.14 (- United States)
2016-09-14 11:43Distribution SiteLocky
harrisonboileau.com
GODADDY.COM, LLC185.119.173.181 (- United Kingdom)
2016-09-14 11:43Distribution SiteLocky
creditvalleyca.ca
eNom Canada Corp.192.124.249.102 (- United States)
2016-09-14 11:43Distribution SiteLocky
twdct.com
GODADDY.COM, LLC (n/a)
2016-09-14 11:42Distribution SiteLocky
msayin.com
PDR LTD. D/B/A PUBLICDOMAINREGIS[...]188.124.5.33 (- Turkey)
2016-09-14 11:42Distribution SiteLocky
morerevista.com
ENOM, INC.23.236.238.226 (- United States)
2016-09-14 11:42Distribution SiteLocky
eupos.org
PDR Ltd. d/b/a PublicDomainRegis[...]85.10.254.98 (- Germany)
2016-09-14 11:42Distribution SiteLocky
elvox.pl
nazwa.pl sp. z o.o.89.146.221.6 (- Germany)
2016-09-14 11:41Distribution SiteLocky
cghponyclub.com
ENOM, INC. (n/a)
2016-09-14 11:41Distribution SiteLocky
jonathankimsey.com
TUCOWS DOMAINS INC.198.49.23.144 (- United States)
2016-09-14 11:41Distribution SiteLocky
joydetergent.com
GODADDY.COM, LLC173.57.204.44 (- United States)
2016-09-14 11:41Distribution SiteLocky
sexturbo.ru
REGRU-RU91.219.194.36 (- Russian Federation)
2016-09-14 11:41Distribution SiteLocky
amaranthine-deerplacenta.com
SHINJIRU MSC SDN BHD (n/a)
2016-09-14 11:40Distribution SiteLocky
thcsgoxoai.com
ENOM, INC. (n/a)
2016-09-14 11:40Distribution SiteLocky
lifeforbody.com
GODADDY.COM, LLC67.227.156.32 (- United States)
2016-09-14 11:40Distribution SiteLocky
teksunrobot.com
HICHINA ZHICHENG TECHNOLOGY LTD.119.29.144.76 (- China)
2016-09-14 11:40Distribution SiteLocky
kinabalustudios.com
SHINJIRU MSC SDN BHD119.81.216.111 (- Singapore)
2016-09-14 11:40Distribution SiteLocky
stratageeks.com
ENOM, INC.23.235.209.203 (- United States)
2016-09-14 11:40Distribution SiteLocky
directdesignsny.com
GODADDY.COM, LLC107.180.50.238 (- United States)
2016-09-14 11:39Distribution SiteLocky
loansbypeople.com
ASCIO TECHNOLOGIES, INC. DANMARK[...]104.37.35.84 (- United States)
2016-09-14 11:39Distribution SiteLocky
mayuliang.com
1&1 INTERNET SE204.93.183.173 (- United States)
2016-09-14 11:39Distribution SiteLocky
cyborgminds.com
FASTDOMAIN, INC. (n/a)
2016-09-14 11:39Distribution SiteLocky
tenalpsebooks.com
DEMYS LIMITED46.101.47.208 (- United Kingdom)
2016-09-14 11:39Distribution SiteLocky
liyuesheng.com
HICHINA ZHICHENG TECHNOLOGY LTD. (n/a)
2016-09-14 11:38Distribution SiteLocky
adventurevista.com
ENOM, INC.204.93.163.87 (- United States)
2016-09-14 11:38Distribution SiteLocky
subuys.com
1&1 INTERNET SE74.220.199.8 (- United States)

# of rows displayed: 100
# of entries in database: 12'828

Page 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 >